Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
File: 5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json)
Hash identifier: upWu0SzkBoyRE4eKq42CvK81LmjpvchEP1MA81NC/Bc=
Subject key identifier: BD:A2:A8:0E:1F:16:41:B3:7E:BF:C8:93:56:0E:99:4F:DD:EC:F1:8F
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 019D99624C29BA7221C1E070C07DBB8E17D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
Manifest number: 0F7B
Signing time: Fri 17 Apr 2026 03:00:49 +0000
Manifest this update: Fri 17 Apr 2026 03:00:49 +0000
Manifest next update: Sat 18 Apr 2026 03:00:49 +0000
Files and hashes: 1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: h0ksDlZ7j3XosHOLO1xvk3tuMXQ919iY1njvHN6ix5c=)
2: JB8RpMy8Elqc90uZwoSTL7Ub9OM.roa (hash: EhChNPxJv+f83uqvMXFZRPaKproZQgsDNAIW+MBK7d0=)
3: iRQgfXGareNueuLCIctR3v98BqA.roa (hash: kAKY6Tag+JlVYUh6YTHrUL0leqbQ2DPtbgkhBL53tDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:4c:29:ba:72:21:c1:e0:70:c0:7d:bb:8e:17:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: Apr 17 03:00:49 2026 GMT
Not After : Apr 18 03:00:49 2026 GMT
Subject: CN=bda2a80e1f1641b37ebfc893560e994fddecf18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:f6:4a:8e:16:f9:b2:22:f4:51:0f:e2:d6:
24:ac:f5:a8:d2:d1:9c:19:f5:b5:1b:67:56:5a:f6:
0f:0a:f0:8c:67:0e:82:21:b5:be:d4:2e:c4:f4:7a:
f5:b6:19:58:9a:64:a9:7f:42:da:b4:f5:7d:a8:37:
23:7c:09:86:8c:00:74:03:c1:05:59:cc:9a:46:3a:
bd:b2:2e:5c:8c:de:73:cf:72:59:c0:54:cd:43:5c:
38:3e:83:7b:6f:3d:db:ae:3b:1f:1e:14:0b:ea:e3:
98:fa:a8:dd:67:80:be:b3:78:b6:8b:1b:49:a0:e6:
37:8b:46:aa:ff:84:7d:c9:75:4b:31:7f:74:8a:6a:
49:c8:28:42:f4:67:d9:84:7f:d9:d6:94:c5:dc:dc:
1c:ef:4d:41:7e:5f:89:63:31:16:07:2f:f5:d8:92:
b9:ba:b8:30:9d:51:19:6b:ca:27:e8:5f:dc:9d:52:
9f:05:0e:45:87:9c:58:f6:3d:24:27:46:64:2c:5b:
ae:2d:17:f0:68:d4:1a:52:bb:ea:41:d8:eb:0d:eb:
44:b2:ac:05:47:47:24:49:3a:36:c9:b7:61:53:40:
3d:8a:b9:95:d1:5d:a8:82:f3:0b:3e:7b:24:09:42:
65:ae:2f:3b:1e:33:6e:48:44:c7:ba:72:b6:8e:29:
b4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A2:A8:0E:1F:16:41:B3:7E:BF:C8:93:56:0E:99:4F:DD:EC:F1:8F
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:dd:1c:21:77:53:82:50:ab:83:9c:65:01:f2:24:18:19:10:
eb:c8:e4:16:8f:c2:a5:df:8d:e0:7d:30:83:cc:19:d1:f4:42:
9f:3b:f7:fa:a5:3f:9b:0a:aa:c4:9b:9c:05:2b:4a:1c:07:60:
66:2c:e1:fa:1d:ea:c0:42:ad:38:e0:79:80:75:85:18:13:df:
1c:38:26:4e:62:2a:31:49:c7:83:45:14:3b:ae:dd:c6:df:da:
9c:c3:67:f3:a4:1f:c3:e4:f7:1b:b1:0d:25:19:af:fe:1c:13:
12:c0:fe:2e:3b:ee:a8:aa:ba:7e:ce:df:8c:bb:06:7c:93:28:
74:a4:4f:4d:7c:4d:16:67:3e:04:8b:d4:ff:b9:0f:78:2f:60:
b1:eb:b6:08:5f:39:93:aa:00:4e:12:29:73:24:87:20:ac:cf:
3a:4e:3c:ba:41:f8:c5:65:63:95:55:7f:d6:f8:f7:c0:fa:cb:
18:d7:eb:53:92:c7:34:8b:dc:b2:b0:04:e0:ed:69:72:26:72:
a6:05:ba:41:a3:ce:7a:fb:3d:aa:3b:f2:0d:16:e9:3f:1f:90:
25:06:f3:41:76:c3:71:17:f9:b9:2a:c3:7a:9d:1b:f5:cf:44:
96:ee:10:1f:63:b5:92:4c:54:d4:61:9a:0e:e3:6a:87:0e:22:
a3:91:10:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:50:38 2026 by rpki-client